Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/X0sJvwV09OqcfyACoi0QzOiDpSI.asa
File: X0sJvwV09OqcfyACoi0QzOiDpSI.asa (raw, json)
Hash identifier: 4DIZkxx6C1+CqW+PWxpXd6bNAzfNgcYhwNzEirfyRvY=
Subject key identifier: 5F:4B:09:BF:05:74:F4:EA:9C:7F:20:02:A2:2D:10:CC:E8:83:A5:22
Certificate issuer: /CN=8a5a850d9a0302d3b5cc2ddf8ab33caab7cce4a6
Certificate serial: 019D739FB6D20133DBF575CE247B529C158D
Authority key identifier: 8A:5A:85:0D:9A:03:02:D3:B5:CC:2D:DF:8A:B3:3C:AA:B7:CC:E4:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilqFDZoDAtO1zC3firM8qrfM5KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/X0sJvwV09OqcfyACoi0QzOiDpSI.asa
Signing time: Thu 09 Apr 2026 19:02:20 +0000
ASPA not before: Thu 09 Apr 2026 19:02:20 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 215619
Providers: AS: 44324
AS: 212895
AS: 215172
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilqFDZoDAtO1zC3firM8qrfM5KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:73:9f:b6:d2:01:33:db:f5:75:ce:24:7b:52:9c:15:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a850d9a0302d3b5cc2ddf8ab33caab7cce4a6
Validity
Not Before: Apr 9 19:02:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f4b09bf0574f4ea9c7f2002a22d10cce883a522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:34:5b:17:0f:66:7a:bc:c7:ef:96:f3:0d:
8d:5c:93:23:92:a4:79:8d:86:13:1f:fd:2f:c8:1b:
5b:19:ce:5c:48:08:9e:95:66:de:ce:fe:e6:40:a7:
d6:e3:e4:fa:6b:02:b0:1a:f5:9e:bd:06:f8:31:78:
00:0b:1e:01:93:c9:91:9e:80:ca:6a:0e:50:76:06:
da:86:7e:c1:49:7f:1c:29:49:79:c6:67:3f:76:4e:
df:1d:f4:bf:93:68:52:cc:53:49:7e:83:96:12:98:
50:6e:f1:f2:f4:ec:cf:3e:8b:89:20:3c:1f:6c:d6:
08:ed:67:e6:08:94:72:6c:f7:0f:d0:76:81:fe:20:
70:5b:82:8a:a4:8b:ec:20:88:8f:ce:f9:ac:73:ac:
0d:8c:5a:2a:44:10:52:61:48:1c:86:67:1b:63:51:
d7:eb:d3:81:f9:5c:49:7e:86:69:e4:f7:bf:9f:af:
68:81:16:67:aa:76:b3:68:01:b9:13:bf:21:55:20:
9f:8c:17:17:2e:76:79:a5:21:37:d2:7a:3b:6b:5e:
5f:34:36:17:67:c3:60:d9:54:6e:d2:4a:2b:04:cd:
39:cd:a7:70:1a:5b:cd:b1:6a:97:40:14:f7:d9:a8:
50:e4:06:56:e3:9b:25:98:47:ea:e7:f5:81:d3:7e:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4B:09:BF:05:74:F4:EA:9C:7F:20:02:A2:2D:10:CC:E8:83:A5:22
X509v3 Authority Key Identifier:
keyid:8A:5A:85:0D:9A:03:02:D3:B5:CC:2D:DF:8A:B3:3C:AA:B7:CC:E4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilqFDZoDAtO1zC3firM8qrfM5KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/X0sJvwV09OqcfyACoi0QzOiDpSI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215619
Signature Algorithm: sha256WithRSAEncryption
67:70:c7:2a:14:66:f9:80:c5:29:d0:52:c7:38:4d:d1:65:0b:
65:17:95:39:6c:4d:de:25:d4:94:ca:6b:8a:94:ad:29:37:44:
cf:ef:fa:89:2f:26:fc:b6:cb:14:a3:b0:06:ee:d2:e0:2b:82:
8a:be:f9:5b:2d:04:ea:99:81:e7:68:65:3a:f9:5c:95:41:be:
b2:42:40:a5:73:42:a6:3c:17:04:48:44:d0:c3:46:6f:48:12:
fa:8a:a7:16:b0:ab:52:4b:83:e4:2b:80:5c:5a:da:92:90:d0:
cd:af:61:fb:b7:3d:85:55:78:87:fa:67:dc:a9:b6:ed:ae:0e:
09:b5:f3:68:13:db:7f:f2:e3:48:97:de:8c:2f:e4:38:7a:c1:
df:06:0c:ec:55:6f:56:a0:e4:3a:25:a3:39:c7:3e:4d:b2:5a:
29:a9:d0:98:7e:39:54:15:9f:5c:21:4f:a3:16:95:9b:47:ea:
da:9d:2a:2a:bd:b6:f0:ee:99:b0:15:1c:ff:a7:b3:e4:9c:32:
0c:62:32:4d:f8:85:35:28:f6:6f:df:bf:a6:06:e5:60:7d:64:
b8:a0:34:50:83:50:3c:95:d4:8e:e9:cd:b1:b1:c5:73:8c:2b:
05:49:ed:f4:16:41:85:ab:f5:6e:74:17:b3:10:2f:40:e9:e6:
67:19:97:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:38 2026 by rpki-client